Search

Available in Classic and VPC

In Search, it introduces how to check the number of collected logs by hour through graphs and detailed logs, and search logs with Lucene queries.

Search page

The basics of the Search menu in Web App are as follows.

Search log

The following shows how to search logs collected in Effective Log Search & Analytics 2.0 in Web App's Search menu.

1. Access Web App. (Refer to Access Web App)

2. Click the Search menu.

3. Enter the name of the project or group in the data source search bar.

   • Click the search field, and recently searched project or group names are displayed.
   • When entering a search keyword, the search result window appears and shows the names of projects or groups that include the keyword.
   • To search logs with the notification items, click the Import notification button and select the item in the import notification popup window.
   • To search logs with the notification items, click the Import notification button and select the item in the import notification popup window.
   • You can also search by clicking on each item in the Project, Group, Notification, Saved search menus in the Management menu.

4. When searching logs in the search result window, select projects or a group to search logs from and click any area other than the search result window.

   • Up to 30 projects can be selected and only 1 group can be selected.
   • Charts and detailed log items for the number of collected logs for the last 30 minutes based on the current time are displayed.

5. Enter the Lucene queries in the search bar, or reset the items in the status field and aggregation field to search logs.

   • For detailed information on the Lucene syntax, see Apache Lucene.
   Note

   There are some occasions where you place the mouse pointer on some log text and the Complete match tooltip displays. With this tooltip feature, you can search the fields only where the entire text matches with the log text, not just partial matches.

   • Select or deselect the issue status in the Status field for the desired condition.
     • Status: FATAL, ERROR, WARN, INFO, and DEBUG
   • Select or deselect the aggregation items in the Aggregation field for the desired condition.
     • : select/deselect aggregation items, change order, delete, add new aggregation name, and reset

6. Check the log search results.

   • For more information, see Search page.

Download logs

The following shows how to download log search results.

1. Access Web App. (Refer to Access Web App)
2. Click the Search menu.
3. Search and filter the logs. (Refer to Search logs)
4. Click the [Download logs] button from the log list and select the type of logs.
   • Log (JSON/CSV): download the entire viewed logs in JSON or CSV format
   • Crash dump: download crash dump logs
5. When downloading logs (JSON/CSV), select download options in the log download popup window.
   • Format: select the file format (CSV or JSON)
   • Number: number of logs to download
   • Compression: select whether to download the data in file compression format
     • When the compression feature is on, logs will be downloaded in several files.
     • When the compression feature is off, logs will be downloaded in a single file. However, the download time will increase due to the increased file size.
   • Number of logs per file: number of logs to be saved in a file
   • Field: select the field to download (in case of CSV format, you must select the field)
6. When downloading crash dumps, click the [Crash dump] button in process No. 3 to download the files immediately.
7. Click [Download].
   • The files in which logs are saved will be downloaded.